add the ability to use a Yubikey or other kinds of usb 2auth devices
It would be really nice to use a usb device for 2auth (something like the yubikeys).
-
emilycarterr515
commented
Adding support for YubiKey and other USB-based two-factor authentication devices would be a great security improvement. Hardware security keys offer a convenient way to strengthen account protection while reducing reliance on codes sent through SMS or generated by an app. Clear documentation explaining setup, compatibility, and recovery options would also help users adopt this feature confidently. Similarly, the most successful tech blog https://techmexa.com/ writers focus on one clear audience, such as students, gamers, or small business owners. A narrow focus helps build loyal readers and stronger search rankings.
-
jamesjohnii435
commented
Totally agree with the Yubikey idea, that extra layer of security would be awesome. I've been using apps like [url=https://spotifyfree.net/] Spotify Premium APK Free[/url] lately, and securing accounts linked to them is super important. A USB 2FA option would definitely help.
-
LividJava
commented
This has been a top-10 most requested feature for some time. There are multiple reasons for hardware authentication to be implemented on both the viewer and streamer sides. I'll list a few reasons below if that is what's needed to get this implemented.
All accounts generally contain some form of Personally Identifying Information. For most viewers it'd just be your Payment Information, Phone Number, and any Connected Accounts you have.
For Streamers, people who have Affiliate or Partner status. Not only is the above true, but you now have your Tax Information, Banking Details (Limited). Streamer accounts tend to be more sensitive by nature.
Granted, Payout information does require a Re-Authentication, but if they have access to your password and phone number (assuming SMS 2FA) its over.
There are also issues with 2FA-TOTP (Rolling 30-second codes generated in an app). Namely that people can fall for phishing attempts with TOTP.
I want something secure for my account and my community that I put time, effort, and care into.
Editing this, it seems at some point twitch removed the emails from the subscriber list. however the point remains there is still a LOT of sensitive information
-
MikeV_IRL
commented
Why is this still not available, years after it was suggested? SMS is NOT secure! People get SIM swapped all the time! Let me use a USB key as my main, then my code app as a backup. Give me SECURE options to ensure my account remains secure!
-
theKizuati
commented
i really don't know why this still isn't implemented. no brainer alternative to the ****** SMS requirement
-
Omgitshawn
commented
yes all this
-
Mooha
commented
+1 for use of FIDO2 Keys, specifically those who enrolled in Google's Advanced Protection Program and use Titan security keys!
-
できません
commented
I am finding that some major companies, such as Google, are even going so far as to allowing its users to go passwordless simply by using said Yubikey (FIDO2 Keys) and biometric scans (such Face ID or fingerprint authentication.) I definitely fully support the use of this for multi-factor authentication (MFA) or going passwordless on Twitch.
-
WrapOwl
commented
Security keys should be integrated as standard these days. Yubikey or comparable manufacturers in particular should be compatible with such a large platform as Twitch. If AWS allows this, why isn't it also the case here on Twitch?
-
marcrisale
commented
I have google titan keys and I definitely would like to see this option.
-
LikelyLycanthrope
commented
Please add support for using one or more hardware U2F tokens for 2FA, e.g. Yubikey, Solokeys, etc. devices. Please also add this as a stand-alone 2FA option that does *not* require a mobile phone or other authentication application if possible.
-
Mrheartstomper
commented
Please add the ability to use U2F or FIDO/FIDO2 authentication methods for use with the Yubikey security keys. At least enable manual TOTP creation for use with other TOTP clients.
-
Rob Frawley 2nd
commented
Right now 2-step-auth on Twitch is such a minimal implementation, only supporting SMS codes (insecure) and Authy integration only. Why can't I at least see a bar-code with my 2-step-auth key so applications outside of Authy can be used, like Google Authenticator. Displaying the 2-step-auth key barcode at setup would even allow the use of OATH-TOTP codes using security keys like the YubiKey 4 and 5.
But ultimately, as has already been described by the many others commenting in this suggestion thread, it is important that full support for security keys is ultimately added. At a minimum you need to support "FIDO U2F/UAF" (https://en.wikipedia.org/wiki/Universal_2nd_Factor), but it would also be beneficial to support the newer "FIDO 2 UAF/U2F, WebAuthn, CTAP" standard (https://fidoalliance.org/fido2/)
-
Matthew
commented
The security improvements if this was implemented would be major. 2FA is a good step for most attacks, but U2F is more convenient and secure.
-
tuv
commented
In addition to the benefits of U2F on its own, allowing people to add multiple 2FA options (code generator app + one or more U2F keys) reduces the chance of account lockouts.
-
Matt
commented
Would be really useful for full-time streamers who would suffer significantly from having a compromised account.
-
speedmann
commented
I'd higly like to see the possibility of having U2F or at least hardware supported OTP as a possibility of 2FA